» xcleaner_full.exe
Overview
Analysis
File Details

xcleaner_full.exe

X-Cleaner

FaceTime Communications

File name:

xcleaner_full.exe

Publisher:

FaceTime Communications (signed and verified)

Product:

X-Cleaner

Description:

Privacy Solution

Version:

4.0.0.396

MD5:

81ef86e4fd4903408266ac1355dd0fc6

SHA-1:

6fee807912c27aae1f5a4b97855ccc79a9f73277

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/3/2024 4:09:14 AM UTC (today)

Scan engine

Detection

Engine version

Panda Antivirus

Trj/Thed.B

14.08.03.03

File size:

1 MB (1,062,920 bytes)

Product version:

4.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\x-cleaner\xcleaner_full.exe

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/28/2007 5:00:00 PM

Valid to:

10/28/2009 4:59:59 PM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Belment, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

55148BC9DDB9312B278B97CD4FF1B8E4

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:/jA9ZTxwwKNkcpWTKsomRBcK8w/BTAd/yIfD7MP+h2rRl:WZTx3csTZcKjpAd/yIspRl

Entry address:

0x1000

Entry point:

68, 01, 10, 68, 00, E8, 01, 00, 00, 00, C3, C3, 5A, 97, 8B, 61, F1, F2, BD, 5F, 84, 8B, 67, 16, 91, 77, F2, 44, 86, 13, C9, 35, F4, 9C, 39, 66, C8, AD, 1D, 9F, 74, 97, 9B, D1, EE, 7F, B6, CF, F9, CE, 08, E3, C8, 88, 79, C8, BD, 3E, 52, 23, DA, B7, A6, FF, A5, E4, 0A, FC, 05, 97, 8D, C4, 48, DA, 05, B4, DD, 6D, 59, BF, 7D, A7, A5, 95, 4D, A9, E1, F4, 21, 9C, A7, 3E, E8, D0, 6D, 8A, CD, AB, 43, 71, 2A, B0, B8, BB, 94, 33, D2, BE, 91, BC, 7B, B1, D1, E8, 18, 31, C6, 5E, 2E, F6, 34, D9, 38, A7, 2A, 51, 1A, 35... 
[+]

Entropy:

7.9858

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.1 MB (1,184,768 bytes)

Scan xcleaner_full.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.